ื ืึธืš ืึท ื™ืึธืจ ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ืึท ื ื™ื™ึทืข ื‘ืึทื˜ื™ื™ื˜ื™ืง ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ OpenWrt 22.03.0 ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืื™ื– ืืจื•ื™ืก, ืึทื™ืžืขื“ ืฆื• ื ื•ืฆืŸ ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ื ืขืฅ ื“ืขื•ื•ื™ืกืขืก ืึทื–ืึท ื•ื•ื™ ืจืึธื•ื˜ืขืจืก, ืกื•ื•ื™ื˜ืฉื™ื– ืื•ืŸ ืึทืงืกืขืก ืคื•ื ืงื˜ืŸ. OpenWrt ืฉื˜ื™ืฆื˜ ืคื™ืœืข ืคืึทืจืฉื™ื“ืขื ืข ืคึผืœืึทื˜ืคืึธืจืžืก ืื•ืŸ ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื– ืื•ืŸ ื”ืื˜ ืึท ืคึฟืึทืจื–ืึทืžืœื•ื ื’ ืกื™ืกื˜ืขื ื•ื•ืึธืก ืึทืœืึทื•ื– ืคึฟืึทืจ ืคึผืฉื•ื˜ ืื•ืŸ ื‘ืึทืงื•ื•ืขื ืงืจื™ื™ึทื– ื–ืึทืžืœื•ื ื’, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืคืึทืจืฉื™ื“ืŸ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืื™ืŸ ื“ืขืจ ืคึฟืึทืจื–ืึทืžืœื•ื ื’, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ื’ืจื™ื ื’ ืฆื• ืฉืึทืคึฟืŸ ืคืึทืจื˜ื™ืง ืคื™ืจืžื•ื•ืึทืจืข ืึธื“ืขืจ ืึท ื“ื™ืกืง ื‘ื™ืœื“ ืžื™ื˜ ื“ื™ ื’ืขื‘ืขื˜ืŸ ื’ืึทื ื’ ืคื•ืŸ ืคืึทืจ-ื–ืึทืžืœื•ื ื’. ืื™ื ืกื˜ืึทืœื™ืจืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืฆื•ื’ืขืคืืกื˜ ืคึฟืึทืจ ืกืคึผืขืฆื™ืคื™ืฉ ื˜ืึทืกืงืก. ืึทืกืขืžื‘ืœื™ื– ื–ืขื ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืคึฟืึทืจ 35 ืฆื™ืœ ืคึผืœืึทื˜ืคืึธืจืžืก.

ืฆื•ื•ื™ืฉืŸ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ OpenWrt 22.03.0 ื“ื™ ืคืืœื’ืขื ื“ืข ื–ืขื ืขืŸ ื‘ืืžืขืจืงื˜:

  • ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ืึท ื ื™ื™ึทืข ืคื™ืจืขื•ื•ืึทืœืœ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ - fw4 (Firewall4), ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ Nftables ืคึผืึทืงืึทื˜ ืคื™ืœื˜ืขืจ. ื“ื™ ืกื™ื ื˜ืึทืงืก ืคื•ืŸ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืขืก (/etc/config/firewall) ืื•ืŸ ื“ื™ uci ืฆื•ื‘ื™ื ื“ ื”ืึธื‘ืŸ ื ื™ืฉื˜ ืคืืจืขื ื“ืขืจื˜ - fw4 ืงืขื ืขืŸ ืฉืคึผื™ืœืŸ ื•ื•ื™ ืึท ื˜ืจืึทื ืกืคึผืขืจืึทื ื˜ ืคืึทืจื‘ื™ื™ึทื˜ ืคึฟืึทืจ ื“ื™ ืคืจื™ืขืจ ื’ืขื•ื•ื™ื™ื ื˜ ื™ืคึผื˜ืึทื‘ืœืขืก-ื‘ืื–ื™ืจื˜ ืคื•ื•3 ื˜ืึธืึธืœืงื™ื˜. ื“ื™ ื•ื™ืกื ืขื ืื™ื– ื“ื™ ื›ึผืœืœื™ื ืฆื•ื’ืขืœื™ื™ื’ื˜ ืžืึทื ื™ื•ืึทืœื™ (/etc/firewall.user), ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืจื™ืžืึทื“ื™ื“ ืคึฟืึทืจ ื ืคื˜ืึทื‘ืœืขืก (ืคื•ื•4 ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืœื™ื™ื’ืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื”ืขืจืฉืŸ ื‘ืœืึทืงืก, ืึธื‘ืขืจ ืื™ืŸ ื ืคื˜ืึทื‘ืœืขืก ืคึฟืึธืจืžืึทื˜).

    ื“ื™ ืึทืœื˜ ื™ืคึผื˜ืึทื‘ืœืขืก-ื‘ืื–ื™ืจื˜ ื˜ืึธืึธืœืงื™ื˜ ืื™ื– ื™ืงืกืงืœื•ื“ื™ื“ ืคื•ืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ื‘ื™ืœื“ืขืจ, ืึธื‘ืขืจ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื‘ืจืื›ื˜ ืฆื•ืจื™ืง ืžื™ื˜ ื“ื™ ืึธืคึผืงื’ ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืึธื“ืขืจ ื“ื™ ื‘ื™ืœื“ ื‘ื™ืœื“ืขืจ ื˜ืึธืึธืœืงื™ื˜. ืื•ื™ืš ืฆื•ื’ืขืฉื˜ืขืœื˜ ื–ืขื ืขืŸ ื“ื™ iptables-nft, arptables-nft, ebtables-nft ืื•ืŸ xtables-nft ืจืึทืคึผืขืจื–, ื•ื•ืึธืก ืœืึธื–ืŸ ืื™ืจ ืฆื• ืฉืึทืคึฟืŸ ื›ึผืœืœื™ื ืคึฟืึทืจ nftables ืžื™ื˜ ื“ื™ ืึทืœื˜ ืกื™ื ื˜ืึทืงืก ืคื•ืŸ iptables.

  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืžืขืจ ื•ื•ื™ 180 ื ื™ื™ึท ื“ืขื•ื•ื™ืกืขืก, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ 15 ื“ืขื•ื•ื™ืกืขืก ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ MediaTek MT7915 ืฉืคึผืึธืŸ ืžื™ื˜ Wi-Fi 6 (IEEE 802.11ax) ืฉื˜ื™ืฆืŸ. ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ ืฉื˜ื™ืฆื˜ ื“ืขื•ื•ื™ืกืขืก ืื™ื– ืจื™ื˜ืฉื˜ 1580.
  • ื“ื™ ื™ื‘ืขืจื’ืึทื ื’ ืคื•ืŸ ืฆื™ืœ ืคึผืœืึทื˜ืคืึธืจืžืก ืฆื• ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ DSA (Distributed Switch Architecture) ืงืขืจืŸ ืกืึทื‘ืกื™ืกื˜ืึทื ื”ืืœื˜, ืคึผืจืึทื•ื•ื™ื™ื“ื™ื ื’ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ืื•ืŸ ืึธื ืคื™ืจื•ื ื’ ืงืึทืกืงื™ื™ื“ื– ืคื•ืŸ ื™ื ื˜ืขืจืงืึทื ืขืงื˜ื™ื“ ืขื˜ื”ืขืจื ืขื˜ ืกื•ื•ื™ื˜ืฉื™ื–, ื ื™ืฆืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ืคึฟืึทืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ืงืึทื ื•ื•ืขื ืฉืึทื ืึทืœ ื ืขืฅ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– (iproute2, ifconfig). DSA ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืคึผืึธืจืฅ ืื•ืŸ ื•ื•ืœืึทื ื– ืื™ืŸ ืคึผืœืึทืฅ ืคื•ืŸ ื“ื™ ืคืจื™ืขืจ ื’ืขืคึฟื™ื ื˜ swconfig ื’ืขืฆื™ื™ึทื’, ืึธื‘ืขืจ ื ื™ื˜ ืึทืœืข ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ืจื™ื•ื•ืขืจืก ืฉื˜ื™ืฆืŸ DSA ื ืึธืš. ืื™ืŸ ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืžืขืœื“ื•ื ื’, DSA ืื™ื– ื’ืขื ื™ืฆื˜ ืคึฟืึทืจ ื“ื™ bcm53xx ืคึผืœืึทื˜ืคืึธืจืžืก (ื“ืจื™ื•ื•ืขืจืก ืคึฟืึทืจ ืึทืœืข ื‘ืึธืจื“ื– ื–ืขื ืขืŸ ืื™ื‘ืขืจื’ืขื–ืขืฆื˜), ืœืึทื ื˜ื™ืง (SoC ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ xrx200 ืื•ืŸ vr9) ืื•ืŸ sunxi (Bananapi Lamobo R1 ื‘ืึธืจื“ื–). ื‘ื™ื– ืึทื”ืขืจ, ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืก ath79 (TP-Link TL-WR941ND), bcm4908, gemini, kirkwood, mediatek, mvebu, octeon, ramips (mt7621) ืื•ืŸ realtek ื–ืขื ืขืŸ ื˜ืจืึทื ืกืคืขืจื“ ืฆื• DSA.
  • ื“ื™ LuCI ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ ื”ืื˜ ืึท ื˜ื•ื ืงืœ ืคึผืœืึทืŸ ืžืึธื“ืข. ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ื“ื™ ืžืึธื“ืข ืื™ื– ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืื•ื™ืกื’ืขื“ืจื™ื™ื˜ ื“ื™ืคึผืขื ื“ื™ื ื’ ืื•ื™ืฃ ื“ื™ ื‘ืœืขื˜ืขืจืขืจ ืกืขื˜ื˜ื™ื ื’ืก, ืึธื‘ืขืจ ืขืก ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ืงืขืจืึทืงื˜ืขืจื™ื™ื–ื“ ื“ื•ืจืš ื“ื™ ืžืขื ื™ื• "ืกื™ืกื˜ืขื" -> "ืกื™ืกื˜ืขื" -> "ืฉืคึผืจืึทืš ืื•ืŸ ืกื˜ื™ืœ".
  • ืกืึทืœื•ื•ื“ ืึท 2038 ืึทืจื•ื™ืกื’ืขื‘ืŸ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ืึธื•ื•ื•ืขืจืคืœืึธื• ืคื•ืŸ ื“ื™ 32-ื‘ื™ืกืœ ืฆื™ื™ื˜_ื˜ ื˜ื™ืคึผ (ื“ื™ 32-ื‘ื™ืกืœ ืžื™ื˜ื™ืง ืฆื™ื™ื˜ ื˜ืึธืžื‘ืึทื ืง ื•ื•ืึธืœื˜ ืœื•ื™ืคืŸ ืื•ื™ืฃ ื™ืื ื•ืืจ 19, 2038). ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ื ื™ืฆื˜ ื“ื™ musl 1.2.x ืฆื•ื•ื™ื™ึทื’ ื•ื•ื™ ืึท ื ืึธืจืžืึทืœ ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ืื™ืŸ ื•ื•ืึธืก ืื•ื™ืฃ 32-ื‘ื™ืกืœ ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื– ื“ื™ ืึทืœื˜ 32-ื‘ื™ืกืœ ืฆื™ื™ื˜ ืงืึธื•ื ื˜ืขืจืก ื–ืขื ืขืŸ ืจื™ืคึผืœื™ื™ืกื˜ ืžื™ื˜ 64-ื‘ื™ืกืœ ืึธื ืขืก (ื“ื™ time_t ื˜ื™ืคึผ ืื™ื– ืจื™ืคึผืœื™ื™ืกื˜ ื“ื•ืจืš time64_t). ืื•ื™ืฃ 64-ื‘ื™ืกืœ ืกื™ืกื˜ืขืžืขืŸ, ื“ื™ time64_t ื˜ื™ืคึผ ืื™ื– ื˜ื›ื™ืœืขืก ื’ืขื ื™ืฆื˜ (ื“ืขืจ ื˜ืึธืžื‘ืึทื ืง ื•ื•ืขื˜ ืœื•ื™ืคืŸ ืื™ืŸ 292 ื‘ื™ืœื™ืึธืŸ ื™ืึธืจืŸ). ื“ืขืจ ื™ื‘ืขืจื’ืึทื ื’ ืฆื• ืึท ื ื™ื™ึทืข ื˜ื™ืคึผ ื’ืขืคื™ืจื˜ ืฆื• ืึท ืขื ื“ืขืจื•ื ื’ ืื™ืŸ ื“ื™ ABI, ื•ื•ืึธืก ื•ื•ืขื˜ ื“ืึทืจืคืŸ ืึท ืจื™ื‘ื™ืœื“ ืคื•ืŸ ืึทืœืข 32-ื‘ื™ืกืœ ืžื’ื™ืœื” ืคืืจื‘ื•ื ื“ืŸ ืžื™ื˜ musl libc (ืงื™ื™ืŸ ืจื™ื‘ื™ืœื“ ืคืืจืœืื ื’ื˜ ืคึฟืึทืจ 64-ื‘ื™ืกืœ ืžื’ื™ืœื”).
  • ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ 5.10.138 ืžื™ื˜ ืคึผืึธืจื˜ื™ื ื’ ืคื•ืŸ ื“ื™ cfg80211/mac80211 ื•ื•ื™ื™ืจืœื™ืก ืึธื ืœื™ื™ื’ืŸ ืคึฟื•ืŸ ื“ื™ 5.15.58 ืงืขืจืŸ (ืคืจื™ืขืจ ื“ื™ 5.4 ืงืขืจืŸ ืžื™ื˜ ื“ื™ ื•ื•ื™ื™ืจืœื™ืก ืึธื ืœื™ื™ื’ืŸ ืคื•ืŸ ื“ื™ 5.10 ืฆื•ื•ื™ื™ึทื’ ืื™ื– ื’ืขืคึฟื™ื ื˜), musl libc 1.2.3, ื’ืœื™ื‘ืง 2.34, ื’ืงืง 11.2.0, ื‘ื™ื ื•ื˜ื™ืœืก 2.37, ื”ืึธืกื˜ืึทืคึผื“ 2.10, ื“ื ืกืžืึทืกืง 2.86, ื“ืจืึธืคึผื‘ืขืึทืจ 2022.82, ืคืึทืจื ื•ืžืขืŸ ื‘ืึธืงืก 1.35.0.
  • ื“ืขืจ ื“ื•ืจ ืคื•ืŸ ืึทืกืขืžื‘ืœื™ื– ืคึฟืึทืจ ื“ื™ arc770 ืคึผืœืึทื˜ืคืึธืจืžืข (Synopsys DesignWare ARC 770D) ืื™ื– ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’